Re: Clients can't browse the web after apply SBS2K3 SP1

Hi Dante,

Thanks for your update!

For your OS is non-English version, I suggest that you post the question in
newsgroup for your language version since different versions may have
different issue and solutions and this newsgroup is for English version
support. The reason why we recommend posting appropriately is you will get
the most dedicated pool of respondents, and other partners who the
newsgroups regularly can either share their knowledge or learn from your
interaction with us. Also, this is to make sure that the responders can
better track the problem Thank you for your understanding.
=======================
If this response time does not meet your needs, I would like to suggest you
contact Microsoft Customer Support Services via telephone for more
immediate assistance. Please be advised that contacting phone support will
be a charged call. However, if you are simply requesting a hotfix be sent
to you and no other support then charges are usually refunded or waived.

To obtain the phone numbers for specific technology request please take a
look at the web site listed below.
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS

If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.
=======================
For your scenario, we must check if the DNS server works properly. I am
sorry for misguide you to use Nslookup.exe tool. Please refer to the
following KB article to use Nslookup.exe tool to test and troubleshoot DNS
server.
200525 Using NSlookup.exe
http://support.microsoft.com/?id=200525
=======================
Additionally, I would like to introduce a Network monitor utility to
capture the packages between the server and the clients for further analyze
the issue:

The detail steps to use the utility:

A. Install the network monitor utility on the SBS server and the client
workstation:

* For SBS server: open Add/Remove programs in Control panel. Click
'Add/Remove Windows Components' and select 'Management and Monitoring
Tools'\''Network Monitor Tools. Insert the Windows server CD to finish the
installation.

* For Windows Client:
i. Download the ZIP file at
ftp://ftp.microsoft.com/pss/tools/netmon/netmon2.zip (about 4MB).
ii. Extract both of the following two files in netmon2.zip to a folder:
" qfesetup.EXE
" license.txt
Note: The password is trace; The installation will fail if you directly run
the execute file within netmon2.zip.
iii. Run QFESETUP.EXE and follow the wizard to proceed with the
installation.
iv. Run the network monitor from C:\Documents and Settings\All Users\Start
Menu\Programs\Administrative Tools\Network Analysis Tools\Network Monitor

B. On the SBS server, open 'Network Monitor' in 'Administrative Tools'. The
first time you run the tool, a dialog box will prompt and ask you select
the monitored NIC. Please select the Internal NIC of the SBS server and
click OK.

C. In the window, click 'Capture'->'Buffer Settings'. Set the buffer size
to 10MB. Set the frame size to 'Full' and click 'OK'.

D. Go to the Windows XP client. Open Network monitor program. Also select
the monitored NIC and set the buffer size to 10MB.

E. Go to the SBS server. Click 'Capture'->'Start'. Go to the client
workstation, also click 'Capture'->'Start'. The network monitor will
capture the traffic on the workstation's NIC.

F. Access some internet website from client workstations.

Please try to analyze the data to try to find the root cause.
=======================
Please refer to the following the link to get the tool info:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Serve
rHelp/ad2b59d1-0fb8-45e3-9055-a5aeba8817a9.mspx

I appreciate your time and efforts to perform test. We are glad to help!

Have a nice day!

Best Regards,

Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>From: "Dante Alighieri" <josemariar@xxxxxxxxxxxxxx>
>References: <#pTx8G9tFHA.2624@xxxxxxxxxxxxxxxxxxxx>
<DQRGT7DuFHA.3848@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Clients can't browse the web after apply SBS2K3 SP1
>Date: Tue, 13 Sep 2005 23:07:12 +0200
>Lines: 239
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Message-ID: <eFklfcKuFHA.360@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: 85.red-80-32-190.pooles.rima-tde.net 80.32.190.85
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:153044
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Thanks Jenny. I add my comments below...
>
>1. The clients do not use web proxy
>
>2. DNS and default gateway on clients points to internal NIC address. I
can
>even ping external sites from any client by IP or by name.
>
>3. Internal NIC is in the top in binding order in the server
>
>4. I've tried to rerun the CICW twice and I get no errors, but it's still
>malfunctioning.
>
>For the rest of the questions:
>
>1. No page can be reached. I've tested many of them.
>
>2. With IP adresses it's the same.
>
>3. I've tried with Opera, and nothing again.
>
>4. Here is the ipconfig and nslookup from a dhcp client (I've tried with
>static ip adresses too). Sorry but I don't have any english client at the
>office :-(
>
>Microsoft Windows XP [Versión 5.1.2600]
>(C) Copyright 1985-2001 Microsoft Corp.
>
>C:\Documents and Settings\Administrador>ipconfig /all
>
>Configuración IP de Windows
>
> Nombre del host . . . . . . . . . : ws-control
> Sufijo DNS principal . . . . . . : Morenosa.local
> Tipo de nodo. . . . . . . . . . . : híbrido
> Enrutamiento habilitado. . . . . .: No
> Proxy WINS habilitado. . . . . : No
> Lista de búsqueda de sufijo DNS: Morenosa.local
> Morenosa.local
>
>Adaptador Ethernet Conexión de área local :
>
> Sufijo de conexión específica DNS : Morenosa.local
> Descripción. . . . . . . . . . . : Adaptador Fast Ethernet
>compatible V
>IA
> Dirección física. . . . . . . . . : 00-04-61-4D-45-B7
> DHCP habilitado. . . . . . . . . : No
> Autoconfiguración habilitada. . . : Sí
> Dirección IP. . . . . . . . . . . : 192.168.0.27
> Máscara de subred . . . . . . . . : 255.255.255.0
> Puerta de enlace predeterminada : 192.168.0.9
> Servidor DHCP . . . . . . . . . . : 192.168.0.9
> Servidores DNS . . . . . . . . . .: 192.168.0.9
> Servidor WINS principal . . . . . : 192.168.0.9
> Concesión obtenida . . . . . . . : lunes, 12 de septiembre de
2005
>11:2
>2:31
> Concesión expira . . . . . . . . .: martes, 20 de septiembre de
2005
>11:
>22:31
>
>C:\Documents and Settings\Administrador>nslookup
>Servidor predeterminado: srv-sbs.morenosa.local
>Address: 192.168.0.9
>
>5. The error is "Internet explorer can't open the search page". The client
>tries to open the requested page, even resolves the ip adress (the status
>bar says Connecting the site XXX.XXX.XXX.XXX), and then tries to open the
>microsoft search page.
>
>Even more strange, I had http traffic from the clients this morning for a
>while WITHOUT MODIFIYING ANYTHING IN THE SERVER NOR THE CLIENTS, and then
>failed again. It can't be an ISP problem because I have Internet from the
>server itself ALWAYS and the rest of the network services (vpn, email,
>terminal services...) works well always.
>
>I thought that it could be an post-SP1 hotfix problem, because I installed
>all of them after the SP1 with windows update. I have uninstalled all of
>them and reboot and then I reran the CICW with no results.
>
>I'm completely lost with this error and my users are getting angry. If you
>have any idea it would be greatly appreciated.
>
>Please, copy your responses to josemariar@xxxxxxxxxxx because I don't have
>newsgroups enabled at the office, only at home.
>
>Thanks for your attention!!!
>
>Dante
>______________________________
>Jose María Rodríguez Requena
>MCSD, MCDBA, MCAD, MCP
>Moreno S.A. - CIO - Controller
>
>
>""Jenny wu [MSFT]"" <v-yanniw@xxxxxxxxxxxxxxxxxxxx> escribió en el mensaje
>news:DQRGT7DuFHA.3848@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hi Dante,
>>
>> Thanks for posting here!
>>
>> For your description, I understand that all your clients can not browse
>> internet after you applied SBS 2003 SP1. If I am off base, please feel
>> free
>> to let me know.
>>
>> Let us do some test to try to isolate the issue:
>>
>> 1. Please check all clients if they enabled web proxy. Please ensure they
>> can not use web proxy. You can follow the steps:
>> a. Open IE -> Tools -> Internet Options.
>> b. Click Connection tab and click LAN Settings button to open Local Area
>> Network Settings page. Please ensure uncheck box of Use a proxy server
for
>> your LAN (these setting will not apply to dial-up or VPN connection).
>>
>> 2. Please check clients' DNS and Gateway settings. Please ensure
clients'
>> DNS and Gateway both point to the SBS server internal NIC IP.
>>
>> 3. Please ensure proper the binding order of the network adapter cards.
>> The internal network card should be at the top. The detail steps:
>>
>> a. Right-click the My Network Place and click Properties to open Network
>> Connections page.
>> b. Click Advanced in the menu and click Advanced Settings in dropdown
>> list.
>> c. Under the Adapters and Bindings tab page put the network adapter card
>> at
>> the top in Advanced Settings page.
>>
>> 4. Try to rerun CEICW again, Can you get any error? If yes, please get
the
>> screen shot of the error message and send to me.
>>
>> Try to test again in client side, does the issue be fixed?
>>
>> If the issue persists, please help me collect some information to further
>> analyze:
>>
>> 1.Do all clients can not access all internet sites or just some specific
>> sites? Please try to access www.microsoft.com; www.yahoo.com;
>> www.sina.com
>> and so on to test.
>>
>> 2.How about you access those internet websites using IP address?
>>
>> 3. Please try to use Firefox browser to try to access internet websites,
>> how about the result?
>>
>> 4. Please run commands "ipconfig /all" and "nslookup" in clients and
paste
>> the result in the newsgroup or mail to my mailbox for analyze.
>>
>> 5. What is error you got when clients access internet? Please help me get
>> the screen shot when the issue happened and send files to my mailbox:
>> v-yanniw@xxxxxxxxxxxxx
>>
>> 5. Do all clients can access internal websites successfully such as
>> Companyweb?
>>
>> I appreciate your time and efforts to perform test. I am currently
>> standing
>> by for your test result and information.
>>
>> Have a nice day!
>>
>> Best Regards,
>>
>> Jenny Wu
>> Microsoft CSS Online Newsgroup Support
>> Get Secure! - www.microsoft.com/security
>> ======================================================
>> This newsgroup only focuses on SBS technical issues. If you have issues
>> regarding other Microsoft products, you'd better post in the
corresponding
>> newsgroups so that they can be resolved in an efficient and timely
manner.
>> You can locate the newsgroup here:
>> http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
>>
>> When opening a new thread via the web interface, we recommend you check
>> the
>> "Notify me of replies" box to receive e-mail notifications when there are
>> any updates in your thread. When responding to posts via your newsreader,
>> please "Reply to Group" so that others may learn and benefit from your
>> issue.
>>
>> Microsoft engineers can only focus on one issue per thread. Although we
>> provide other information for your reference, we recommend you post
>> different incidents in different threads to keep the thread clean. In
>> doing
>> so, it will ensure your issues are resolved in a timely manner.
>>
>> For urgent issues, you may want to contact Microsoft CSS directly. Please
>> check http://support.microsoft.com for regional support phone numbers.
>>
>> Any input or comments in this thread are highly appreciated.
>> ======================================================
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> --------------------
>>>From: "Dante Alighieri" <josemariar@xxxxxxxxxxxxxx>
>>>Subject: Clients can't browse the web after apply SBS2K3 SP1
>>>Date: Mon, 12 Sep 2005 21:39:46 +0200
>>>Lines: 18
>>>X-Priority: 3
>>>X-MSMail-Priority: Normal
>>>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>>>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>>>X-RFC2646: Format=Flowed; Original
>>>Message-ID: <#pTx8G9tFHA.2624@xxxxxxxxxxxxxxxxxxxx>
>>>Newsgroups:
>>
microsoft.public.windows.server.networking,microsoft.public.windows.server.s
>> bs
>>>NNTP-Posting-Host: 85.red-80-32-190.pooles.rima-tde.net 80.32.190.85
>>>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12.phx.gbl
>>>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:152711
>> microsoft.public.windows.server.networking:19582
>>>X-Tomcat-NG: microsoft.public.windows.server.sbs
>>>
>>>Hi all,
>>>
>>>I have applied the SBS2003 SP1 this weekend following the instructions in
>>>microsoft web and everything seems to be OK, except that all the clients
>>>can't browse the internet. I haven't change anything in configuration,
>> only
>>>apply the SP1 post-SP1 hotfixes. The server itself can navigate without
>>>problems. All other services that need an internet connection (like vpn,
>>>e-mail, terminal services) works well. I can ping and nslookup external
>>>sites (and the router, and my ISP's DNS server) from the clients, so I
>>>think it could be a problem in http/https traffic, but I can't find any
>>>solution. My SBS is dual-homed with the external NIC conected to a DSL
>>>router and ISA Server is not installed. I even had rerun the Internet
>>>connection wizard but with no results. ¿Have anyone any idea on this?
>>>
>>>Thanks in advance.
>>>Dante
>>>
>>>
>>>
>>
>
>
>

.